Abstract:As large corporations and organizations increasingly exploit the Internet as a means of improving business-transaction efficiency and productivity, it is increasingly common to find operational data and other business information in XML format. Access control for XML database is non-trivial subjects. A number of recent research efforts have considered access control models for XML data[1−5]. Our first contribution is a novel model for specifying XML security access control. Given an XML document accompanied by a document DTD, we allow a two-stage access control policies to pledge to security access XML document at file-level and element-level respectively. On the element-level access control, our approach for these access control policies is based on the novel notion of hide-node views. While the hide-node view DTD is exposed to authorized users, neither the internal XPath annotations nor the full document DTD is visible. Authorized users can only operate data over the hide-node view, making use of the exposed view DTD to access data. Our hide-node view mechanism guarantees that unauthorized user cannot access sensitive data and protects the schema information from access by unauthorized users. We think that the schema information also is sensitive data and should be protected from gain through the data accessing.

A Implement of Access Control Based Multi-Polices Using XML

A Task-Role Based Access Control Model with Multi-Constraints

A model of XML access control with dual-level security views

A Model for Dynamic Access Control of XML Documents Using Semantics

Practical Way to Implement Role-Based Access Control in Security Administration System

Using XACML to Define Access Control Policy in Information System

XML-Based Context-Constraint Access Control Model and Policy.

Object Oriented Fine-Granularity Access Control for XML Document

Two-Stage access control model for XML security

Multilevel Multi-policy Access Control Model for Collaborative Application

Access Control of Secure Operating System for Electronic Government Application

Using Semantics for Dynamic Access Control of XML Documents in Dynamic Coalition Environment.

Access Control Model for Web Services Based on XACML

Methods on XML Authorization and Access Control

A Fine-Grained Mandatory Access Control Model for XML Documents

Enforce mandatory access control policy on XML documents

A Model Based on Domain for Access Control Policy Refinement and Its Implementation

Detecting conflict of heterogeneous access control policies

A MULTI-POLICY SERVICES-ORIENTED ATTRIBUTE-BASED ROLE-BASED ACCESS CONTROL MODEL

Research on access control of XML document

The Research an and Implementation of an Improved Model of a Dual Logic Acess Control System